Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33382e302f32342d3234203d3e203136383734.roa
File:                     3139382e34312e33382e302f32342d3234203d3e203136383734.roa (raw, json)
Hash identifier:          lSxIT+aZ+l7pLNXpq9kLDemkoHDXUEkjNE+etedaeRg=
Subject key identifier:   AA:F3:55:10:A6:C9:7E:EA:02:5A:91:25:44:00:C6:33:7C:A4:6E:3E
Certificate issuer:       /CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
Certificate serial:       12BD084EF6229315D9AB6DB9EF611CB7776C47BB
Authority key identifier: C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33382e302f32342d3234203d3e203136383734.roa
Signing time:             Thu 09 Jul 2026 23:10:00 +0000
ROA not before:           Thu 09 Jul 2026 23:05:00 +0000
ROA not after:            Thu 08 Jul 2027 23:10:00 +0000
asID:                     16874
IP address blocks:        198.41.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 Jul 2026 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bd:08:4e:f6:22:93:15:d9:ab:6d:b9:ef:61:1c:b7:77:6c:47:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C90120384309CC6F9FAC1F040EBFBB7CC69663B1
        Validity
            Not Before: Jul  9 23:05:00 2026 GMT
            Not After : Jul  8 23:10:00 2027 GMT
        Subject: CN=AAF35510A6C97EEA025A91254400C6337CA46E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:aa:eb:d1:cb:33:3b:e3:21:86:03:1b:3c:1d:
                    b9:aa:8f:e6:35:61:09:2b:59:27:14:13:71:3f:6f:
                    b8:69:c6:15:0e:34:54:d8:c6:ca:93:48:0d:f1:c6:
                    22:81:25:22:86:08:4d:68:3f:13:37:97:b0:46:3f:
                    64:bc:81:c0:e9:ff:ed:38:f1:69:aa:4c:c8:77:bb:
                    91:85:ae:bf:df:d6:8a:6d:d5:8e:2b:3f:f5:8a:6b:
                    d5:f9:bb:f5:78:9b:da:70:fd:7c:4f:1f:55:b7:13:
                    64:c6:8a:ce:9d:cf:45:e2:a1:ca:0b:8f:b0:5d:9c:
                    8e:18:b9:84:46:56:68:8e:05:6e:a4:89:c6:9a:aa:
                    dd:c6:51:43:f6:2b:97:cd:69:16:fb:88:f8:ac:3a:
                    2d:cf:67:c4:4a:b6:eb:d2:3b:09:1f:66:5f:0f:f6:
                    e5:3a:90:56:fe:a1:dd:2a:27:dd:fd:67:70:98:ed:
                    21:99:90:5c:54:fd:f0:5a:a3:19:45:4a:7b:7a:e8:
                    ea:6a:6e:e4:76:5c:6d:a5:0b:46:82:4f:8a:6c:27:
                    86:c2:f4:e7:0b:b3:89:17:dd:1a:5f:37:29:0f:d6:
                    df:07:30:df:d4:27:52:db:0d:11:66:70:25:09:82:
                    f5:54:9f:ab:e5:26:30:9a:cb:4b:7e:e1:7b:3b:da:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F3:55:10:A6:C9:7E:EA:02:5A:91:25:44:00:C6:33:7C:A4:6E:3E
            X509v3 Authority Key Identifier:
                keyid:C9:01:20:38:43:09:CC:6F:9F:AC:1F:04:0E:BF:BB:7C:C6:96:63:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C90120384309CC6F9FAC1F040EBFBB7CC69663B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54D1C88CDFAF42033C05328865F32C57A74054E8F6398423760A55F511D86F3F/0/3139382e34312e33382e302f32342d3234203d3e203136383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:6b:65:04:ab:7e:c9:b4:f1:fb:14:27:2d:1c:58:4e:09:
         73:a6:1a:05:dc:c2:94:40:29:fa:5b:8b:21:69:a3:2b:d5:e9:
         fe:29:3d:68:79:33:50:ec:22:65:72:b2:fc:6b:6b:3d:58:95:
         de:de:7c:58:c6:56:75:a1:2d:38:b5:6b:b8:7c:42:b6:52:09:
         28:42:8e:6f:39:bf:a1:87:68:42:66:21:cf:14:fe:f7:68:d8:
         8f:00:2c:64:ea:65:1c:1e:dd:ab:0f:3e:e0:e1:d8:ae:d7:3f:
         e5:be:43:5a:22:de:50:d6:a3:fa:90:0c:39:bb:df:39:47:f6:
         f0:a1:99:d4:2d:b4:90:86:0a:99:fd:43:6f:55:14:f9:60:e0:
         db:47:50:e7:68:6f:32:0a:99:bb:9e:f8:fb:20:ae:49:17:51:
         0b:ad:4c:24:52:7a:bd:15:3c:6e:b0:48:b6:87:dd:c9:d4:99:
         94:2d:a2:0c:90:70:24:57:b5:17:f5:6f:46:08:91:73:fd:80:
         55:97:fd:a7:de:16:69:be:21:c2:ee:7f:c0:0c:f4:90:15:e4:
         b2:56:75:24:f8:30:65:ca:61:21:b9:89:40:a5:40:22:83:a9:
         60:43:ac:a6:03:5f:96:2f:84:90:8c:c7:af:11:d8:fe:a0:3f:
         e3:f8:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:05:52 2026 by rpki-client